Update Python dependencies (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cosl	0.0.54 -> 1.1.0
cryptography (changelog)	44.0.2 -> 45.0.6
ops (changelog)	2.15.0 -> 3.1.0
ops (changelog)	^2.8.0 -> ^3.1.0
poetry-core	1.7.0 -> 2.1.3
pytest (changelog)	^7.4.0 -> ^8.4.1
tenacity	^8.2.2 -> ^9.1.2

---

Release Notes

canonical/cos-lib (cosl)

v1.1.0: add reconciler

Compare Source

😭

v1.0.0

Compare Source

What's Changed

• Move coordinated_workers out of cosl by @​michaeldmitry in https://github.com/canonical/cos-lib/pull/146

Full Changelog: canonical/cos-lib@0.1.1...1.0.0

v0.1.1

Compare Source

What's Changed

• Deprecate coordinated_workers module by @​michaeldmitry in https://github.com/canonical/cos-lib/pull/148

Full Changelog: canonical/cos-lib@0.1.0...0.1.1

v0.1.0

Compare Source

What's Changed

• Add SECURITY.md file by @​simskij in https://github.com/canonical/cos-lib/pull/137
• Add Tiobe TiCS to the CI by @​michaeldmitry in https://github.com/canonical/cos-lib/pull/141
• Lift coordinators' nginx config generation to cosl by @​michaeldmitry in https://github.com/canonical/cos-lib/pull/143

Full Changelog: canonical/cos-lib@0.0.57...0.1.0

v0.0.57

Compare Source

Surface an otherwise hard-to-spot issue, where the ingress is handing the coordinated workers an HTTPS endpoint, but the coordinator and workers themselves don't have a certificates relation.

Workers and coordinator now set blocked on TLS misconfiguration.

What's Changed

• Fix test-distributed-charms CI workflow by @​michaeldmitry in https://github.com/canonical/cos-lib/pull/134
• worker and coordinator block on tls misconfiguration by @​PietroPasotti in https://github.com/canonical/cos-lib/pull/133
• vbump by @​PietroPasotti in https://github.com/canonical/cos-lib/pull/135

Full Changelog: canonical/cos-lib@0.0.56...0.0.57

v0.0.56

Compare Source

What's Changed

• Feat/open specific worker ports by @​PietroPasotti in https://github.com/canonical/cos-lib/pull/131

Full Changelog: canonical/cos-lib@0.0.55...0.0.56

v0.0.55

Compare Source

What's Changed

• fix: remove ops pin in unit tests by @​MichaelThamm in https://github.com/canonical/cos-lib/pull/123
• Fix: remove ops pin comment by @​MichaelThamm in https://github.com/canonical/cos-lib/pull/124
• Add a utility function to check for ipv6 by @​michaeldmitry in https://github.com/canonical/cos-lib/pull/128

Full Changelog: canonical/cos-lib@0.0.54...0.0.55

pyca/cryptography (cryptography)

v45.0.6

Compare Source

v45.0.5

Compare Source

v45.0.4

Compare Source

v45.0.3

Compare Source

v45.0.2

Compare Source

v45.0.1

Compare Source

v45.0.0

Compare Source

v44.0.3

Compare Source

canonical/operator (ops)

v3.1.0

Compare Source

Features

• Release automation script (#​1855)
• Add app_name and unit_id attributes to testing.context (#​1920)

Fixes

• If an event ends with _abort(0) tests should behave as if it ended successfully (#​1887)
• If self.app is not actually set avoid a new crash location (#​1897)
• Only add the remote unit for departed and broken relation events, fix ordering (#​1918)
• Add the remote unit to relation.data but not relation.units (#​1925)

Documentation

• Use load_config in the httpbin example charm (#​1852)
• Update HACKING.md with how to bump ops version in Charmcraft profiles (#​1872)
• Change title of docs site (#​1890)
• Use config and action classes in the Kubernetes tutorial (#​1891)
• Reference example charms from K8s tutorial and fix consistency (#​1898)
• Update style guide (#​1720)
• Fix issues in how-to guide for stored state (#​1901)
• Link out to the 12-factor tutorials from the tutorial index page (#​1902)
• Replace broken link in testing explanation (#​1913)
• Expand the storage how-to with content from Juju docs scheduled for removal (#​1915)
• Ops tracing how to (#​1853)
• Add a security explanation doc (#​1904)

Tests

• Replace Python version to 3.10 for observability charm tests (#​1914)

CI

• Use httpbin demo charm for the Charmcraft pack test (#​1895)
• Move TIOBE workflow to self-hosted runners (#​1912)
• Add SBOM generation and secscan workflow (#​1906)
• Build and publish in one step (#​1857)
• Update the name and email when updating the charm pins (#​1924)
• Drop smoke test against 20.04 (#​1923)

v3.0.0

Compare Source

The minimum version of Python for Ops 3.x is 3.10.

Documentation

• Be consistent with recommending self.app and self.unit (#​1856)

CI

• Hotfix, publish job for ops-tracing (#​1865)

v2.23.1: : Add the remote unit to Relation.data, but not Relation.units

Compare Source

This is a small bug-fix release for the 2.x series that addresses issues with the recent feature making relation data available in relation-departed events. Rather than inserting the remote unit into Relation.units, the data is available from Relation.data, without changing Relation.units.

What's Changed

Fixes

• Add the remote unit to Relation.data but not Relation.units in https://github.com/canonical/operator/pull/1928

Documentation

• Be consistent with recommending self.app and self.unit in https://github.com/canonical/operator/pull/1856
• Add notice about ops 2 and ops 3 in https://github.com/canonical/operator/pull/1867
• Update title and edit links for ops 2.23 docs in https://github.com/canonical/operator/pull/1885

CI

• Hotfix, publish job for ops-tracing in https://github.com/canonical/operator/pull/1865

Full Changelog: canonical/operator@2.23.0...2.23.1

v2.23.0

Compare Source

Features

• Support for config schema as Python classes (#​1741)
• Support for action parameter schema as Python classes (#​1756)
• Ops[tracing] compatibility with jhack (#​1806)
• Support for relation data schema as Python classes (#​1701)
• Add CheckInfo.successes field and .has_run property (#​1819)
• Provide a method to create a testing.State from a testing.Context (#​1797)
• Expose trace data in testing (#​1842)
• Add a helper to generate a Layer from rockcraft.yaml (#​1831)

Fixes

• Correctly load an empty Juju config options map (#​1778)
• Fix type annotation of container check_infos in ops.testing (#​1784)
• Restrict the version of a dependency, opentelemetry-sdk (#​1794)
• Remote unit data is available in relation-departed (#​1364)
• Juju allows access to the remote app databag in relation-broken, so Harness should too (#​1787)
• Don't use private OpenTelemetry API (#​1798)
• Do not return this unit in a mocked peer relation (#​1828)
• Testing.PeerRelation properly defaults to no peers (#​1832)
• In meter-status-changed JUJU_VERSION is not set (#​1840)
• Only provide the units belonging to the app in Relation.units (#​1837)

Documentation

• Remove two best practices, and drop two to tips (#​1758)
• Update link to Charmcraft for managing app config (#​1763)
• Update link to Juju documentation for setting up deployment (#​1781)
• Fix external OTLP link (#​1786)
• Distribute the ops-scenario README content across the ops docs (#​1773)
• Improve testing.errors.UncaughtCharmError message (#​1795)
• In the "manage the charm version" how-to, give an example of using override-build (#​1802)
• Small adjustments to the 'how to trace charm code' doc (#​1792)
• Replace Harness example and fix links in README (#​1820)
• Add httpbin charm from Charmcraft as an example charm (#​1743)
• Fix on_collect mistake in sample code (#​1829)
• Update code in K8s tutorial, with source in repo (part 2) (#​1734)
• Update Loki section on charming zero-to-hero tutorial (#​1847)
• Remove expandable boxes of text (#​1844)
• Improve httpbin charm by removing defer() and adding collect_status (#​1833)
• Move {posargs} to the end of pytest command lines in tox.ini (#​1854)

CI

• Install the ops[tracing] dependencies for the TIOBE action (#​1761)
• Add ops-scenario and ops-tracing as explicit installs for TIOBE (#​1764)
• Persist credentials for update-charm-pins workflow (#​1766)
• Stop smoke testing Charmcraft 2 (#​1782)
• Use Charmcraft 3.x for smoke testing 20.04 and 22.04 (#​1821)
• Enable xdist for the 'unit' tox environments (#​1830)

v2.22.0

Compare Source

Features

• Add Juju topology labels (#​1744)

Fixes

• Turn on databag access validation in __init__ (#​1737)
• Allow event suffixes to appear in event names in ops.testing (#​1754)

Documentation

• Document how to manage metrics (#​1692)
• Link to our docs from the top of our README (#​1710)
• Update code in K8s tutorial, with source in repo (part 1) (#​1719)
• Update links to juju.is/docs (#​1725)
• Fix link in breakpoint output, remove link from Harness error message (#​1726)
• Update Matrix channel name to Charm Tech (#​1740)
• Rename configurations to configuration (#​1746)
• Fix typos in code snippets by @​MattiaSarti (#​1750)

CI

• Add ops[tracing] integration tests (#​1686)
• Pin workflows by hash (#​1721)
• Disable alertmanager compatibility tests until upstream fix (#​1745)
• Remove explicit scopes and update HACKING.md (#​1748)
• Pin trusted workflows by tag (#​1752)
• Re-enable alertmanager-k8s-operator in observability charm tests (#​1753)
• Fix reporting to TIOBE after ops[tracing] addition (#​1755)

v2.21.1

Compare Source

Reverted

• Reverting "run deferred events with fresh charm instances" (#​1711)

Documentation

• Add best practices about status (#​1689)

v2.21.0

Compare Source

Features

• Ops[tracing] (with a first-party charm lib) (#​1612)
• Pebble identities (#​1672)
• Run deferred events with fresh charm instances (#​1631)

Fixes

• Allow TLS 1.2 in ops-tracing (#​1705)
• Try to fix flaky pebble exec test (#​1664)

Documentation

• Add best practice note around using tooling provided by the charmcraft profile (#​1700)
• Clarify guidance about designing python modules (#​1670)
• Fix a bug in the k8s tutorial doc about unit test (#​1688)
• Fix broken link in readme (#​1679)
• Fix links to juju docs (#​1681)
• Fix tox command in hacking.md (#​1661)
• Improve landing page of kubernetes charm tutorial (#​1660)

CI

• Add zizmor to static check github workflows (#​1656)
• Change prerelease setting used to add latest ops and scenario (#​1682)
• Don't pin release jobs to github environments (#​1683)
• Don't run tests within the publish job (#​1684)
• Fix smoke test (#​1698)
• Post-release versioning, release process update + workflow fix (#​1658)
• Rename "tox -e fmt" to "tox -e format" (#​1668)

Tests

• Fix overly specific test that fails sometimes with tracing (#​1695)

v2.20.0

Compare Source

Features

• Add a remove_revision() method to SecretRemoveEvent and SecretExpiredEvent (#​1624)
• Add Relation.remote_model property (#​1610)
• Efficient implementation of RelationDataContent.update (#​1586)
• Expose the config metadata in CharmMeta (#​1648)
• Add the ability to emit custom events in unit tests (#​1589)
• Check that the check-infos in testing.Container match the plan (#​1630)
• ops.testing.State components are less mutable (#​1617)

Fixes

• Assorted fixes for Pebble layer merging in Harness and Scenario (#​1627)

Documentation

• Add a docs link to the Harness deprecation warning (#​1513)
• Add best practices and a "manage charms" how-to (#​1615)
• Add section about services with long startup time (#​1604)
• Clarify how to use mounts in ops.testing.Container (#​1637)
• Fix code snippet indentation (#​1649)
• Fix Scenario example (#​1616)
• Move hooks-based charm migration guide (#​1636)
• Putting test into each chapter of the tutorial (#​1647)
• Refactor how-to unit test according to comments (#​1642)
• Refactor test docs to 1 explanation and 2 how-tos (#​1628)
• Remove the [email protected] email address (#​1632)
• Remove tutorial chapters that are covered by the how-to guide (#​1511)
• Stack args vertically for long signature lines (#​1641)
• Testing explanation (#​1635)
• Unify charm test docs how to (#​1639)

CI

• Exclude vault-k8s-operator until the system can handle monorepos (#​1650)
• Use the latest version of ops-scenario in the compatibility tests (#​1608)

v2.19.4: ops 2.19.4 and ops-scenario 7.19.4 Synchronise ops and ops-scenario versions

Compare Source

No changes since 2.19.3 and 7.19.3. This is to push packages to PyPI only.

Full Changelog: canonical/operator@2.19.3...2.19.4

v2.19.0

Compare Source

Features

• Expose the Juju version via Model objects (#​1563)
• Support starting and stopping Pebble checks, and the checks enabled field (#​1560)

Documentation

• Update logo and readme by @​tmihoc (#​1571)
• Fill out remaining external link placeholders (#​1564)
• Use noun relation and verb integrate (#​1574)
• Update ref to charmcraft.yaml reference by @​medubelko (#​1580)
• Add a how-to for setting open ports (#​1579)
• Fix links that pointed to earlier Juju docs (#​1575)
• Update links to Charmcraft docs (#​1582)
• Small updates to machine charm tutorial (#​1583)

CI

• Update list of charms and handle increasing uv usage (#​1588)
• Handle presence/absence of "static" and "static-charm" envs (#​1590)

v2.18.1

Compare Source

Fixes

• Ensure that the event snapshot is available when one observer defers and another does not (#​1562)
• Maintain transaction integrity on first run (#​1558)

Documentation

• Set up intersphinx and add links (#​1546)

v2.18.0

Compare Source

Features

• Don't store duplicate events in the notice queue (#​1372)

Fixes

• Remove ops.main.main deprecation warning, and avoid warnings in action output (#​1496)

Documentation

• Use the right ops-scenario for building the docs (#​1470)
• Go full Diátaxis, ingesting the relevant juju.is/docs/sdk documentation by @​tmihoc (#​1481)
• Update boilerplate links (#​1515)
• Fix broken links and use cross references instead of absolute links (#​1519)
• Use explicit framework param instead of *args (#​1523)
• Add doc style tips to HACKING.md (#​1528)
• Fix link to Juju docs in Kubernetes charm tutorial (#​1529)
• Remove the publish badge from the README (#​1505)
• Add how-to for storing state (#​1534)
• Improve info about contributing to docs (#​1533)
• Fix formatting errors in HACKING.md (#​1539)

Continuous Integration

• Add support for injecting the latest ops when uv is used (#​1477)
• Don't cancel other unit tests when one fails (#​1471)
• Use Concierge to set up the smoke test environments (#​1541)
• Bump poetry to 2.0 to match downstream (#​1542)
• Enable the prometheus-k8s revision updates again (#​1544)
• Include Juju 2.9 in the smoke tests (#​1545)

Testing

• Handle warnings generated by our own tests (#​1469)
• Allow check to fail an additional time when running the test (#​1531)

v2.17.1

Compare Source

Fixes

• Make push_path open in binary mode so it works on non-text files (#​1458)

Documentation

• Use MaintenanceStatus for local issues (#​1397)
• Explicitly document that collect-status is is run on every hook (#​1399)
• Use our docs URL for the ogp:url properties Sphinx generates (#​1411)
• Set the READTHEDOCS context variable (#​1410)
• Fix Read the Docs ad placement (#​1414)
• Clarify where StoredState is stored, and the upgrade behaviour (#​1416)
• Fix copy 'n' paste error in stop_services docstring (#​1457)

Continuous Integration

• Configure the labels for dependabot PRs (#​1407)
• Disable the automatic ops[testing] releasing (#​1415)
• Use the actual poetry command, rather than manually tweaking the file (#​1443)
• Fix broken GitHub variable expansion (#​1446)
• Coverage report generation should also include testing/src/scenario (#​1453)
• Fix PR title CI job concurrency (#​1451)
• Adjust the release process to handle publishing ops and ops[testing] (#​1432)
• A better way than commenting out external repos (#​1463)
• Use more descriptive names for the publish workflows (#​1464)
• Move the XML coverage report to .report (#​1465)

Refactoring

• Import the ops[testing] repository (#​1406)
• Update linting with the latest ruff (#​1441)

v2.17.0

Compare Source

Features

• Optionally install Scenario with ops[testing] and expose the names in ops.testing (#​1381)
• Change ops.main() so that you don't need to type: ignore it (#​1345)
• Expand the secret ID out to the full URI when only given the ID (#​1358)
• Add a JujuVersion property for Pebble log forwarding to Loki (#​1370)
• Preemptively raise InvalidStatusError instead of waiting for Juju:
  • Make it an error to call CollectStatusEvent.add_status with error or unknown (#​1386)
  • Document and validate settable status values in _ModelBackend.set_status (#​1354)

Fixes

• Fix type of StatusBase subclasses by calling StatusBase.register in __init_subclass__ (#​1383)
• Secret.set_info and Secret.set_content can be called in the same hook (#​1373)

Documentation

• Add top-level intro and module-level intros (#​1320)
• Update the links to the Pebble docs (#​1362)
• Note about repeatedly setting secret value in Juju 3.6 (#​1366)
• config-changed is triggered by Juju trust (#​1357)
• Typo on CharmBase inheritance example by @​theofpa (#​1349)
• Docs: move Pebble to a separate page (#​1392)

Continuous Integration

• Periodically run the unit tests of all GitHub-hosted published charms (#​1365)
• Update the TIOBE reporting for the changes in coverage calculation (#​1367)
• Spell-check the code as part of linting (#​1388)
• Run the smoke tests on a schedule (#​1387)

Testing

• Fix tests that leaked environment variables (#​1385)

Refactoring

• Move the content of ops.testing to ops._private.harness (#​1369)
• Keep the unittest.mock names in the 'mock' namespace (#​1379)
• Deprecate StatusBase.register decorator (#​1384)

Chores

• Note Juju version on legacy workaround (#​1355)
• Re-enable test now that Pebble directory permissions are fixed (#​1363)
• Generate warnings for events that will be removed in Juju 4.0 (#​1374)

v2.16.1

Compare Source

Fix

• Don't alter os.environ when creating a Harness (#​1359)

v2.16.0

Compare Source

Features

• Add the description field to SecretInfo in (#​1338)

Refactor

• Parse JUJU_* environment variables in one place in (#​1313)

Fixes

• Fix reading Juju secret expiry dates in (#​1317)
• Correct the signature of .events() in (#​1342)

Documentation

• Security policy change to only support each active major release in (#​1297)
• Add Juju version markers in (#​1311)
• Use Sphinx 8 in (#​1303)
• Live reload documentation with sphinx-autobuild in (#​1323)

Tests

• Update the smoke test series/bases in (#​1318)
• Run pytest in parallel with pytest xdist in (#​1319)
• Bump Pyright to 1.1.377 in (#​1332)
• Run tests on Python 3.12 and the install test on Python 3.13 in (#​1315)

CI

• Add a workflow that runs the TIOBE quality checks in (#​1301)
• Allow executing the TIOBE workflow manually in (#​1321)
• Make Pyright report unnecessary type ignore comments in (#​1333)
• Enable linting of docs/custom_conf.py in (#​1330)

python-poetry/poetry-core (poetry-core)

v2.1.3

Compare Source

Changed

• Update list of supported licenses (#​864).

Fixed

• Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#​858).
• Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#​857).
• Fix an issue where markers with === were not parsed correctly (#​860).
• Fix an issue where local versions with upper case letters caused an error (#​859).
• Fix an issue where extra markers with a value starting with "in" were not validated correctly (#​862).
• Fix an issue where inheriting from WheelBuilder was unnecessarily difficult (#​855).

v2.1.2

Compare Source

Changed

• Improve performance of marker operations (#​851).

Fixed

• Fix an issue where incorrect markers were calculated when removing parts covered by the project's Python constraint (#​841,
  #​846).
• Fix an issue where extra markers were not simplified (#​842,
  #​845,
  #​847).
• Fix an issue where the intersection and union of markers was not deterministic (#​843).
• Fix an issue where the intersection of python_version markers was not recognized as empty (#​849).
• Fix an issue where python_version markers were not simplified (#​848,
  #​851).
• Fix an issue where Python constraints on a package were converted into invalid markers (#​853).

v2.1.1

Compare Source

Fixed

• Fix an issue where simplifying a python_version marker resulted in an invalid marker (#​838).

v2.1.0

Compare Source

Added

• Pass a local version label to the build backend interface (#​814).
• Expose build-system dependencies via the poetry instance (#​319).
• Add has_upper_bound method to VersionConstraint (#​833).

Changed

• Improve performance of calculating intersections and unions of extra markers (#​818).
• Improve performance of calculating intersections and unions of complex markers (#​821,
  #​832).
• Improve performance of marker operations by simplifying python_version markers (#​826).
• Improve performance by caching parsed requirements (#​828).
• Improve error message when a referenced license file is missing (#​827).

Fixed

• Fix an issue where inclusive ordering with post releases was inconsistent with PEP 440 (#​379).
• Fix an issue where invalid URI tokens in PEP 508 requirement strings were silently discarded (#​817).
• Fix an issue where wrong markers were calculated when removing parts covered by the project's python constraint (#​824).
• Fix an issue where optional dependencies that are not part of an extra were included in the wheel metadata (#​830).
• Fix an issue where the __pycache__ directory and *.pyc files were included in sdists and wheels (#​835).

v2.0.1

Compare Source

Changed

• Replace the deprecated core metadata field Home-page with Project-URL: Homepage (#​807).

Fixed

• Fix an issue where includes from tool.poetry.packages without a specified format were not initialized with the default value resulting in a KeyError (#​805).
• Fix an issue where some project.urls entries were not processed correctly resulting in a KeyError (#​807).
• Fix an issue where dynamic project.dependencies via tool.poetry.dependencies were ignored if project.optional-dependencies were defined (#​811).

v2.0.0

Compare Source

Added

• Add support for the project section in the pyproject.toml file according to PEP 621 (#​708,
  #​792).
• Add support for non PEP440 compliant version in the platform_release marker (#​722).
• Add support for string comparisons with in / not in in generic constraints (#​722).
• Add support for script files that are generated by a build script (#​710).
• Add support for SOURCE_DATE_EPOCH when building packages (#​766,
  #​781).

Changed

• Drop support for Python 3.8 (#​798).
• Create METADATA files with version 2.3 instead of 2.2 (#​707).
• Normalize source vcs URLs (#​701).
• Make allow-prereleases a tri-state setting (#​783).
• Rename exceptions to have an Error suffix (#​767).
• Remove support for x in version constraints (#​770).
• Remove support for scripts with extras (#​708).
• Remove deprecated features and interfaces (#​702,
  #​769).
• Deprecate tool.poetry.dev-dependencies in favor of tool.poetry.group.dev.dependencies (#​754).
• Deprecate Package.python_marker (#​446).
• Improve Cygwin git support under Windows (#​704).
• Improve error message when the pyproject.toml file cannot be parsed (#​734).
• Improve handling of readme files (#​752).
• Improve error handling when the Python constraint is empty (#​761).
• Improve performance for creating a PEP 508 requirement from a dependency (#​779).
• Update list of supported licenses (#​706,
  #​718,
  #​727,
  #​736,
  #​746,
  #​755,
  #​764,
  #​784,
  #​787,
  #​795).

Fixed

• Fix an issue where the platlib directory of the wrong Python was used (#​726).
• Fix handling of generic constraints (#​732).
• Fix an issue where building a wheel in a nested output directory results in an error (#​762).
• Fix an issue where + was not allowed in git URL paths (#​765).
• Fix an issue where the temporary directory was not cleaned up on error (#​775).
• Fix an issue where the regular expression for author names was too restrictive (#​517).
• Fix an issue where basic auth http(s) credentials could not be parsed (#​791).

Vendoring

• fastjsonschema==2.21.1
• lark==1.2.2
• [packaging==24.2](https://redirect.github.com/

---

Configuration

📅 Schedule: Branch creation - Between 01:00 AM and 05:59 AM, only on Tuesday ( * 1-5 * * 2 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.